VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 30, 2008· Updated Jun 16, 2026

CVE-2008-4327

CVE-2008-4327

Description

gdiplus.dll in GDI+ in Microsoft Windows XP SP3 does not properly handle crafted .ico files, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a certain crash.ico file on a web site, and allows user-assisted attackers to cause a denial of service (divide-by-zero error and persistent application crash) via this crash.ico file on the desktop, a different vulnerability than CVE-2007-2237.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Microsoft/Windows Xp2 versions
    cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*
    • (no CPE)
  • Microsoft/Gdi\+llm-fuzzy

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.